2.Cookies and Similar Technologies
You can remove or reject cookies using your browser or device settings, but in some cases doing so may affect your ability to use our products and services.
(2.1)Definition of "Cookies"
Cookies are small pieces of text used to store information on web browsers. Cookies are widely used to store and receive identifiers and other information on computers, phones, and other devices.These types of files do a number of different jobs such as remembering your preferences and chosen items, assisting you to improve your site experience as well as trying to ensure that the adverts or offers you see online are more relevant to you. These “cookies” can be divided into 4 types each of which is outlined below.
(2.2)Types of Cookies
Strictly Necessary Cookies
In order to provide you with fundamental services of our website,such as visit our website or make a purchase,these cookies are essential. If you disable these cookies, we will not be able to fulfill your request.
This type collect anonymous information on how people use the site and the data is merged with other users to enable us to improve how the site operates. For example we utilise Google Analytics cookies to help us understand how customers arrive at our site, browse or use our site and highlight areas where we can improve areas such as navigation, shopping experience and marketing campaigns. The data stored by these cookies never shows personal details from which your individual identity can be established.If you disable or opt-out of these cookies, you may not be able to use certain features of our websites and services, and it may reduce the support or information that we can provide you.
These cookies may remember the operations such as your preference so that we can provide you with better services and improve our operation models.If you reject these cookies, you may not be able to use certain functions of our websites
(2.3)Controlling and Opting-Out of Cookies
You can change the settings on your browser to prevent cookies being stored on your computer or mobile device without your explicit consent. Your browser “help” section will normally provide details on how to manage the cookie settings. If you choose to reject cookies, as noted above, you may not be able to use certain features of our websites and services.
(2.4)Other similar technologies
DPAPI (Data Protection Application Programming Interface) is a simple cryptographic application programming interface available as a built-in component in Windows 2000 and later versions of Microsoft Windows operating systems. In theory the Data Protection API can enable symmetric encryption of any kind of data; in practice, its primary use in the Windows operating system is to perform symmetric encryption of asymmetric private keys, using a user or system secret as a significant contribution of entropy.DPAPI can help record and store users’ personal data.
Data Cube is a simple application for record and analyze personal data.
If you choose to reject cookies, as noted above, you may not be able to use certain features of our websites and services.
Please confirm that when you agree with this privacy statement, your age is at least 16 years old or you have a guardian's authorization. Please immediately contact us if you become aware that a child under 16 has provided us with personal data.
4.Data Processing Globally
The definition of Processing is any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
We provide products and service to customers around the world and your personal data may be transferred to, and stored at, a destination outside the European Economic Area ("EEA"). It may also be processed outside the EEA by staffs who work for EXhobby . Data protection laws vary among countries, with some providing more protection than others. Regardless of where your information is processed, we apply the same protections descried in this policy. We also sufficiently consider about certain legal frameworks relating the processing of data.
When we provide products and services to customers under assistance of our affiliates, business partners and service providers，your personal data may be processed out of EEA. In such circumstances, we will enter into model contractual clauses, or rely on alternative legal bases such as the Privacy Shield, where applicable, or binding corporate rules where our partners or service providers have adopted. Appropriate or suitable safeguards, for example, encryption technology, will be provided to ensure security of your information.
We use reasonable technical, administrative, and physical security measures designed to safeguard and help prevent unauthorized access to your data, and to correctly use the data we collect. For example, access to your personal data is strictly limited to our data controller, data processer, data protection officer who need access to such data to perform their assigned job duties. We have built up recovery system to prevent your data from destruction, loss, alteration, unauthorized disclosure caused by automatic technology.
It is important that you take precautions to protect against unauthorized access to your account credentials, and computer or other devices. “personal data breach”means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data transmitted, stored or otherwise processed.If you notice such kind of personal data breach, please immediately contact us. We will investigate any complaint and notify the individual of the outcome of the investigation within a reasonable period.Please be aware that, despite our best efforts, no security system is impenetrable. In the event of a security breach, we will promptly notify you and the proper authorities if required by law.
6.Collection, Use and Storage of Personal Data
(6.1)Definition of personal data
Personal data means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data.Personal data does not include data that has been irreversibly anonymized or aggregated so that it can no longer enable us, whether in combination with other information or otherwise, to identify you.
Here is a description of the types of personal data we may collect and how we may use it.
(6.2)What Personal Data We Collect
Depending on the products and services you choose, we collect different kinds of personal data from or about you.
Data you provide
We collect the personal data you provide when you create an account to use our products and services or otherwise interact with us, such as when you fill in account information, contact us, participate in an online survey, use our online help or online chat tool.
We may collect and store information (including personal data) locally on your device using mechanisms such as browser web storage (including HTML 5) and application data caches.
Data about purchase
If you make a purchase, we collect personal data in related with the purchase. This data includes your purchase data, such as your mail of paypal,user name,shipping address and other authentication information, as well as billing, shipping, and contact details.
(6.3)How We Use Your Personal Data
Generally speaking, we use personal data to provide, improve, and develop our products and services, to communicate with you, to offer you targeted advertisements and services, and to protect us and our customers.
EXhobby determines and controls how to process your personal data as data controller for the following purposes:
Providing, improving, and developing our products and services
Communicating with you
Subject to your prior express consent, we may use personal data to send you marketing communications in relation to our own products and services, communicate with you about your account or transactions, and inform you about our policies and terms. If you no longer wish to receive email communications for directly marketing purposes, please contact us to opt-out. We also may use your data to process and respond to your requests when you contact us. If you no longer wish to agree above services we provide, please contact us to opt-out.
Offering and measuring targeted advertisements and services
Subject to your prior express consent, we may use your personal data to personalize your experience with our products and services and on third-party websites and applications and to determine the effectiveness of our promotional campaigns. You are free to choose whether receive promotion information or not. If you no longer wish to agree above services we provide, please send e-mail to us to opt-out or choose”unsubscribe” to opt out in those e-mails.
Promoting safety and security
Subject to your prior express consent,we may use some technology measures to protect your personal data for helping verify accounts and user normal activities, as well as to promote data safety and security, such as by monitoring fraud and investigating suspicious or potentially illegal activity or violations of our terms or policies. Such processing is based on our legitimate interest in helping ensure the safety of our products and services.
(6.4)How We Store Your Personal Data
We may take technology measures to make sure your personal data record is complete and accurate,such as cookies and similar technologies.And Subject to your prior express consent,we may store our processing record of your personal data for ten years.
EXHobby websites accept payments via PayPal, which is located at PayPal, Inc., 2211 North First Street, San Jose, CA 95131, USA. If you select payment via PayPal, the payment data you provide will be supplied to PayPal based on GDPR Art, processing for the purpose of completing a contract.
8.Other Important Privacy Information